CVEvulnerability
CVE-2005-1283
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-04-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to (1) read arbitrary files via the UIDL parameter to the msg script or (2) copy or move the user's .eml file to arbitrary locations via the delete script, a different vulnerability than CVE-2005-0367.
Affected configurations
• argosoft argosoft mail server 1.8.7.6
References
- http://marc.info/?l=bugtraq&m=111419001527077&w=2 marc.info
- http://www.osvdb.org/15821 www.osvdb.org
- http://www.osvdb.org/15823 www.osvdb.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20226 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20229 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=111419001527077&w=2 marc.info
- http://www.osvdb.org/15821 www.osvdb.org
- http://www.osvdb.org/15823 www.osvdb.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20226 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20229 exchange.xforce.ibmcloud.com